JP2017509042A - Communication device with optical activation sensor - Google Patents

Abstract

The communication device 1 includes a memory M that stores a numeric key and a diversification algorithm, a calculation unit D that generates an identification code from at least the numeric key and the diversification algorithm, and identification codes 101, 102, and 103 generated by the calculation unit. A display for displaying. The communication device further includes an optical sensor 11 that receives the optical signal 30.

Description

  The field of the invention relates to devices that secure transactions, in particular by the generation of security codes. More precisely, the field of the invention applies to the area of bank cards, where the display comprises a module that generates code for securing transactions.

  Currently, there is already a solution to manufacture bank cards that can secure transactions by phone, or over the internet, by simply identifying the card with its card number, expiration date, and holder Exists.

  A simple means of securing a transaction is a three digit security code, also called CSC, CVV, CVC or V-code, or CCV. Applicants use the widely acronym CVV known to those skilled in the art, which is an abbreviation for Card Verification Value.

  One problem with this security measure is that the code is statically displayed on one side of the card. As a result, this code can be easily read by a third party and used in conjunction with other information collected on the card.

  In order to increase the security of such transactions using bank cards, it is known to make CVV dynamic. Dynamic CVV is a code that changes over time, and this code is displayed on the card. The variable code is provided by a synchronized pseudo-random type generator to a server that allows the authenticity of the code to be verified according to the date and time of the transaction.

  However, the use of dynamic CVV causes several problems. The first problem arises from personalization, which requires introducing a numeric encryption key into the memory of the display module before the display module can be incorporated into a smart card.

  This solution is complex in construction because there is an increased need to track modules that generate and display CVV codes with associated card numbers. Since the card number is not always known at this point, ie during the definition of the numeric key in the module, tracking and assigning the module is complicated to implement.

  In one alternative, it is possible to have an external contactor that personalizes the module that generates the CVV code. Once the card is manufactured, personalization is performed with an external device that allows the cryptographic key to be personalized in the module. However, since contactors may not be convenient for the user, this solution has drawbacks in terms of card usage. Contactors also adversely affect the aesthetic appearance of the card.

  In another alternative, the module that generates the CVV code may be associated with an RF module that allows establishing a link with an external device that enables personalization after the card is manufactured. However, this solution is expensive and difficult to implement, especially for contactless bank cards where one of the modules can cause interference with the other.

  In another alternative, the module that generates the CVV code can be connected to a microchip already built into the card via an ISO contact. However, this solution is difficult in terms of integration. Furthermore, this solution does not allow to separate the two components of the card and make them independent. The independence of the two components helps to secure the card environment and makes it less hackable.

  The second problem is that even in the case of a dynamic CVV code, the theft of information displayed on the smart card cannot be excluded. For example, if the card can be viewed by a third party, that third party collects information including the dynamically displayed CVV code and uses that information within the expiration date of the code. Can do.

  For this reason, existing solutions offer a means to limit theft of such information. For example, it is possible to provide a button on the display that generates a CVV code display only when needed. This solution has the disadvantage of being difficult to integrate into a smart card, and the buttons can be inconvenient for the user. Also, the buttons can be pressed by a malicious person who has the card wrongly or temporarily.

  Another solution is to trigger the display periodically, and this solution can be expensive in terms of power consumption. This solution also has to wait for the code to be displayed and can have a negative impact during the transaction. This solution is not feasible if the waiting time when confirming payment becomes too long.

  The present invention makes it possible to overcome the above-mentioned drawbacks.

One subject of the present invention relates to a communication device, which is:
-Memory for storing numeric keys and diversification algorithms;
A computing unit that generates an identification code from at least a numeric key and a diversification algorithm;
A display for displaying the identification code generated by the computing unit;
Is provided.

  Furthermore, the communication device according to the present invention comprises an optical sensor capable of receiving and / or detecting light.

The light sensor is advantageously intended to receive an optical signal, the communication device performs a device initialization function, and the initialization function is:
-Decoding a sequence of data that modulates the optical signal received by the optical sensor;
-Storing the numeric key contained in the decrypted sequence.

  One advantage is that personalization of devices such as smart cards is possible in a safe and simple way using optical emitters.

  One advantage is that when the communication device is incorporated into the card at the time of card manufacture, it facilitates device traceability for communication with the smart card. The numeric key may be associated with the card number at the time of final personalization of the card after manufacture of the card. Thus, the communication device is advantageously a module that generates an identification code, such as a CVV-type code, whose numeric key constitutes the initialization seed of the diversification algorithm.

  In one embodiment of the present invention, the calculation unit executes a function of activating the display after obtaining the light intensity received by the optical sensor for a predetermined time.

  One advantage of this feature is that it makes it possible to obtain a delayed code display. This display delay may be understood as a minimum activation time and can thus provide protection from code being copied by a third party.

  The received light quantity may be the received light intensity. If this light intensity is integrated over a time scale, the light intensity can define the amount of energy received.

  The amount of light received over a predetermined time may be measured depending on the embodiment, by a direct light sensor, by a computing unit, or jointly by these two components. For this purpose, the communication device may include a clock, and the arithmetic unit can trigger a time counter to measure the luminous flux during a predetermined time.

  The communication device can compare the light intensity received at each instant during the acquisition time or in another embodiment, and the communication device can determine the total energy received during the acquisition time as the energy limit value. Can be compared.

  The communication device advantageously comprises a battery for powering the display and the computing unit. This allows the communication device to be independent. Its low power consumption makes it possible to provide a minimum lifetime that exceeds the lifetime typically with a smart card with an expiration date.

  Advantageously, the computing unit can generate an identification code from the numeric key stored in the memory and the public part of the data.

  Such generation makes it possible to increase the security of the displayed code and its effectiveness.

  The published part of the data is advantageously date data. In this case, the communication device includes a clock capable of transmitting the date.

  In one embodiment, the communication device according to the invention comprises a clock for determining a time interval, at which time the display allows the display of the identification code generated by the computing unit. The display of the identification code is advantageously displayed after a predetermined security time has elapsed after the detection of light.

  A new identification code is advantageously generated periodically.

  Advantageously, the display of the identification code continues to be displayed during the display time.

  If this solution is selected, the server also includes a clock that checks its match between an identification code, such as a CVV code, and data corresponding to the date data that made it possible to generate a dynamic CVV code. The server may in particular be configured to tolerate some tolerance for time drift of a clock used in the communication device.

  The display advantageously enables electrophoretic display. This solution makes it possible to reduce power consumption, especially thanks to the non-volatile state of the displayed data.

  Advantageously, the first predetermined time is 10 minutes-2 days and the second predetermined time is 1-10 minutes.

  Another subject of the invention relates to a smart card comprising a communication device according to the invention.

  In one embodiment of the invention, the display of the communication device is placed on the same card surface as the light sensor.

Another subject of the present invention relates to a method for conducting a transaction from a smart card containing a device, the device comprising:
-Memory for storing numeric keys and diversification algorithms;
A computing unit for generating an identification code from a numeric key;
A display for displaying the identification code generated by the computing unit;
-An optical sensor for receiving and / or detecting light;
Is provided. The method is:
-Arranging the smart card so that the light sensor is exposed to the light source in a minimum amount of time;
The code is displayed on the display after being exposed for a minimum amount of time.

  One advantage of such a method is that the verification process of the identification code is made secure by shortening the time during which the identification code can be exposed to a third party.

Another subject of the invention relates to a method for personalizing a smart card containing a card number, said method comprising:
Assigning a communication device according to the invention to a card number, wherein the identifier of the communication device is stored in a remote server and associated with the card number;
-Assembling a communication device on the smart card;
-Assigning a numeric key to the communication device associated with the card number;
-Transferring the numeric key by receiving at the optical sensor an optical signal modulated by a series of data during the final personalization of the smart card.

  The benefit of such a method is that the modules that generate the identification code are no longer required to be tracked on the cards by associating them with the cards from the time the cards are manufactured. In such a case, it is understood that the communication device according to the present invention is a module that generates CVV code. The CVV generation module is personalized during final personalization, and the initialization seed is easily adapted to the account number entered on the card at the same time.

  The transfer of the numeric key advantageously involves the emission of an optical signal modulated by a series of data in the optical sensor of the communication device.

  Other features and advantages of the present invention will become apparent in the following detailed description with reference to the accompanying drawings.

FIG. 4 is a back view of a smart card with a communication device according to the present invention. 1 is a surface view of a smart card comprising a communication device according to the present invention.

  In the following detailed description, the “light activation sensor” is generally referred to as a “light sensor”.

  In the present application, the “encryption key” may be referred to as a “numeric encryption key” or a “numeric key”.

  The form for implementing this invention demonstrates embodiment whose communication device is a dynamic CVV code production | generation apparatus. More generally, in the present invention, a code generated from a numeric key which may be, for example, a CVV type is called an identification code.

  FIG. 1 represents a smart card 2 presented on its one side, usually the back side 2 '. This back side contains the communication device 1 according to the invention.

  The device according to the present invention includes an optical sensor 11 that can receive a light beam 30.

  The light sensor may be a light receiving element such as a phototransistor, a photodiode, or a photoelectric cell. When the communication device is incorporated in a smart card, the light sensor 11 is preferably placed on the same card surface as the display 10.

  When the communication device is incorporated in a smart card, the light sensor may be placed under the translucent part to allow surface homogeneity with the surface of the smart card. In one embodiment, the translucent portion forms part of the surface of the card. The translucent part thus protects the light sensor from contact by hand or rubbing that may occur when the card is placed in a pocket or wallet.

  The optical sensor 11 is connected to the calculation unit D. The display 10 makes it possible to display a dynamic CVV code based identification code. The memory M is used for storing the numeric encryption key K and the diversification algorithm. The clock 16 also makes it possible to provide time data. In one embodiment of the present invention, the numeric key and the time data make it possible to generate an identification code using the computing unit D. The generation of the identification code may be according to a known diversification algorithm, for example, associating a unique identification code according to the date, or generating a new code at a predetermined date. This identification code is valid for a predetermined time corresponding to the time interval between the generation of the two identification codes. An algorithm that diversifies the identification code from the secret information, which is composed of a numeric key and time, is executed by the arithmetic unit D. Each generated identification code thus differs from the previous code thanks to the time data.

  There is another alternative method for generating an identification code from a cryptographic key and public data. This public data may be, for example, the number of events when the card holder increments the event counter by taking an action. This action may be taken every time card usage is detected. The counter is also evaluated by the server, for example by counting the number of transactions. In this case, tolerances need to be accepted by the server. Thus, the code may be validated when the transaction ends.

  In this sense, the communication device of the present invention is an apparatus for generating an identification code, for example, a dynamic CVV code. The light sensor defines the seed and stores it in the memory of the identification code generator so that the communication device is initialized. This last stage may be understood as the stage where the smart card is personalized and is in principle performed only once. Furthermore, the light sensor makes it possible to test the reception of light intensity for a predetermined time in order to activate or not activate the display of the code generated when the card is used.

  The display and the calculation unit can be powered by the battery BATT when displaying the identification code. When this code includes three numbers 101, 102, and 103, as shown in FIG. 1, the illustrated sequence represents a three-digit code “482”.

  In the first embodiment of the communication device according to the invention, the first function is to decode the optical string. A signal including numerical data for modulating the first signal is referred to as a “first optical signal”. This first function is used during initialization during card personalization, allowing a numeric encryption key to be defined, transmitted and stored in the memory M. In principle, the first function is performed only once.

  The encryption key defines a seed that allows the identification code to be variable. The seed may contain other information, such as an identifier, if necessary. In an alternative embodiment, receipt of the encryption key can be confirmed in return by a display on the screen or by an LED.

  In the second embodiment of the communication device according to the present invention, the second function is to activate the display 10 after the sensor 11 has been exposed to light for a predetermined time. One advantage is to benefit from two functions at different points in the life of the smart card. Two functions are supported by the identification code generator according to the present invention.

  In use, the second function of the light receiving element is to detect that the card display has been exposed to light for a predetermined time in order to authorize the display of the identification code.

  The second optical signal is a signal that enables the display to be activated, that is, the calculation unit D activates the display of the code on the display 10 with the light intensity received for a certain time. It can be made. This second function is used whenever the user needs an identification code. In this case, the user exposes the surface including the sensor of the smart card 2 to the light 11 for a certain period of time. In the case of FIG. 1, the surface with the sensor is the back surface of the smart card.

  Two embodiments are supported by the communication device of the present invention. These embodiments are activated at different times. With respect to the first function, this function is activated when the card is personalized and thus the card is manufactured and configured. With respect to the second function, this function is activated to provide a new identification code each time it is newly used by the cardholder.

  The function of the first function will be described in detail. In an alternative embodiment, the optical sensor comprises components that allow the optical signal to be demodulated and a number sequence to be extracted therefrom. In a second alternative embodiment, the computing unit comprises an interface configured to receive an analog signal and convert the signal into a numerical signal. The communication device according to the present invention thus comprises an analog-to-digital signal converter that may be incorporated into the optical sensor 11 or the computing unit D. Alternatively, the converter may be a unique component located in the reception chain between the optical sensor 11 and the calculation unit D.

  In an alternative embodiment, components capable of quantifying or normalizing the received signal may be used in a communication device according to the present invention.

  When the converter is incorporated in the sensor 11, the numerical data is transferred to the calculation unit D via the connection 15.

  The calculation unit D makes it possible to extract information from a received sequence such as a numeric encryption key. This key is then stored in memory M via connection 12. The example of FIG. 1 represents a possible implementation embodiment.

  During the personalization stage, a suitable emitter capable of transmitting a series of information that modulates the optical signal may be used in particular during this stage. The emitter is disposed opposite the photosensor.

  The function of the second function will be described in detail.

  If the user wants to generate a dynamic identification code, for example a three-digit code that secures the transaction, the user places the smart card 2 in the 2 'side and the sensor 11 is lighted for a predetermined time. To be exposed. This time may be a few seconds.

  The optical sensor acquires the luminous flux 30 and measures the received light intensity accumulated over a predetermined time. When this light intensity exceeds a predetermined limit value during a predetermined time, the signal may be transmitted directly to the display 10 or to the calculation unit D. This last solution is the mode described in FIG.

  Thereafter, the calculation unit D activates the display of the identification code. Such activation may be understood as “display authorization”.

  In order to perform the second function, unlike the first function, the received optical signal does not necessarily modulate the data string. Only the duration or level of light energy is necessary to activate the display of the identification code.

  In one embodiment, the clock determines the time interval and allows new codes to be generated regularly or pseudo-randomly over time.

  This solution makes it possible, for example, to increase the usage security of smart bank cards. Each displayed identification code is therefore a disposable code.

  The disposable identification code is displayed after the end of a predetermined security time so that the identification code is not immediately exposed to a third party.

  Further, when the identification code is displayed, an optional function may be implemented in order to continue displaying the code for a certain extended time. This function, known as the “freeze” function, freezes the display of a new identification code while the previous identification code is being read.

  In one embodiment, the identification code is generated from an encryption key and time data. The encryption key is stored in the memory M, and can be read by the computing unit D when the computing unit is called to display the identification code. The key and time data transmitted over connection 14 may be algorithmic input data that can generate a valid identification code.

  In other embodiments, the identification code includes N numbers and is not limited to three digits.

  In Fig. 2, information representing the back side 2 "of the smart card 2 is illustrated. The smart card 2 comprises a microchip P1 and an interface 20 with contacts as defined in the ISO 7816 standard. For example, an associated memory. Some elements related to the microchip, such as, are not represented.

  The smart card 2 of the present invention thus allows the communication device of the present invention to be placed on the back side, i.e. the other side of the card, including the microchip that is conventionally placed on the front side.

The present invention is:
-Optimal resolution of the reading of information in the CVV code generation module in terms of solution and usage complexity;
-Making the card easier to manufacture and reducing its cost;
-Allows CVV to be provided with additional security at a good low cost.

Claims (13)

A communication device (1),
-A memory (M) for storing numeric keys and diversification algorithms;
A calculation unit (D) for generating an identification code from at least a numeric key and a diversification algorithm;
A communication device (1) comprising a display (10) for displaying the identification code (101, 102, 103) generated by the arithmetic unit,
Communication device (1), characterized in that it comprises an optical sensor (11) that receives and / or detects light. The optical sensor (11) is intended to receive the optical signal (30), the communication device provides a device initialization function,
-Decoding a sequence of data that modulates the optical signal received by the optical sensor;
The communication device (1) according to claim 1, comprising storing a numeric key included in the decrypted number sequence. The calculation unit (D)
Communication device according to claim 1, which makes it possible to provide the function of activating the display (10) after obtaining the light intensity (30) received by the light sensor (11) during a predetermined time. (1).   The communication device (1) according to claim 1, wherein the device comprises a battery (BATT) capable of powering the display (10) and the computing unit (D).   The communication device according to claim 1, wherein the calculation unit (D) generates an identification code from a numeric key stored in the memory (M) and a public part of the data.   The communication device according to claim 5, wherein the communication device comprises a clock (16) providing a date, the date defining a public part of the data.   A clock for determining the time interval is provided, and the display (10) can display the identification code (101, 102, 103) generated by the calculation unit at the time interval, and a predetermined security time has elapsed after the detection of light. The communication device according to claim 1, wherein the identification code is displayed later.   Communication device (1) according to claim 3, wherein a new identification code is generated periodically.   Communication device (1) according to claim 3, wherein the display of the identification code is maintained on the display during the display time.   A smart card (2) comprising a communication device according to any one of the preceding claims.   The smart card (2) according to claim 10, wherein the display is arranged on the same card surface as the light sensor. A method of conducting a transaction from a smart card (2) containing a device, wherein the device
-A memory (M) for storing numeric keys and diversification algorithms;
A computing unit (D) for generating an identification code from at least a numeric key, wherein the numeric key defines private data;
A display (10) for displaying the identification codes (101, 102, 103) generated by the calculation unit;
A method comprising: a light sensor (11) for receiving and / or detecting light;
Arranging the smart card (2) so that the light sensor (11) is exposed to the light source in a minimum amount of time;
-Displaying the identification code on the display (10) after exposure for a minimum amount of time. A method of personalizing a smart card (2) including a card number,
-Assigning the communication device according to any one of claims 1 to 9 to a card number, wherein the identifier of the communication device is stored in a remote server and associated with the card number; ,
-Assembling a communication device on the smart card;
-Assigning a numeric key to the communication device associated with the card number;
Transferring the numeric key by receiving at the optical sensor (11) an optical signal modulated by a series of data during final personalization of the smart card.

Images